Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa
File:                     1c801033-394b-322a-bebc-f2d3a732f913.roa (raw, json)
Hash identifier:          y9N6k8oSy2ESqIkMkm9BMzSSf/Q5f18u2TAM2N1ojeo=
Subject key identifier:   7B:D1:A1:F6:A7:57:DE:F1:80:F1:E0:57:88:E1:A9:F6:A2:7F:B3:E8
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584F7BB2E72A2481D05E607F78A0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     30133
IP address blocks:        192.158.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:e7:2a:24:81:d0:5e:60:7f:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=77a0121a-7332-4dce-9b22-1f7681a79e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:72:2b:f3:10:d3:b8:5a:5e:7f:bb:c5:81:
                    23:1f:31:6b:c2:ad:dd:62:48:31:b1:35:d6:be:72:
                    b7:f3:e4:ee:d9:82:7f:68:5d:db:95:0b:4b:2a:03:
                    5d:d0:2e:ff:37:c9:38:c7:9c:3f:f8:3a:5a:c4:51:
                    d9:42:42:83:cf:64:37:fc:7c:de:d8:a8:7e:72:4b:
                    80:d4:88:c8:e3:97:70:ca:44:1e:d5:87:af:ec:53:
                    27:c7:55:aa:37:62:0b:17:44:ee:e0:18:30:8b:48:
                    bc:5e:23:76:2a:c7:12:ae:64:a0:de:d7:52:89:27:
                    43:b7:c4:53:ee:7a:3c:87:51:b2:2f:c8:15:ef:b4:
                    66:05:cb:fb:fb:fe:c3:a9:6b:c2:06:46:2e:70:4d:
                    88:2c:87:7f:65:0d:10:5c:f0:1e:93:88:59:ed:b1:
                    86:1e:eb:d4:d2:f0:8f:91:fc:c7:b4:62:7e:98:56:
                    35:cc:bc:19:aa:c8:d8:25:2b:95:12:9e:88:ec:40:
                    3d:bb:60:d4:07:51:aa:6f:a7:3f:e5:2e:51:25:3e:
                    52:35:08:26:03:d4:74:12:b4:e5:d4:d9:2d:13:18:
                    07:96:a5:71:15:50:14:0f:8a:51:23:a5:99:3c:cc:
                    94:56:c2:d5:3c:b3:5f:e2:6a:94:cf:1f:5b:38:03:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D1:A1:F6:A7:57:DE:F1:80:F1:E0:57:88:E1:A9:F6:A2:7F:B3:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6b:8c:d4:bb:12:b9:56:a8:50:3a:33:2d:cf:aa:12:12:7a:
         22:46:95:f4:45:cf:8a:4a:ea:09:c8:6d:54:d0:20:c8:15:57:
         5d:4a:82:8a:2e:51:df:c0:62:18:e3:4d:b2:5a:fd:c6:42:56:
         e7:39:67:bb:d4:50:2e:fb:e3:8c:9e:9e:8d:fd:72:63:88:ed:
         43:aa:a2:50:09:2f:b1:c9:79:0f:07:c5:8e:2d:0d:f7:80:de:
         4e:85:c4:fd:9c:58:35:da:91:cf:b6:88:02:dd:7d:4a:15:5c:
         0b:8f:26:11:17:5e:6b:77:85:83:b9:50:b6:bd:2a:51:b3:45:
         61:16:5d:0a:0c:47:f2:91:9b:d5:25:80:9f:33:b6:35:51:4f:
         6d:3a:05:b6:00:2f:ea:34:57:96:0c:9e:12:0c:1f:7c:37:37:
         ce:d2:1a:4f:2a:d3:6f:23:f8:db:cf:c6:87:d0:1b:71:13:ae:
         f0:09:ff:f1:50:95:bf:c1:61:03:52:98:45:67:df:66:80:a9:
         29:cb:d4:b7:d2:4a:08:26:3d:59:94:01:f7:4a:2c:89:cb:6d:
         d4:7d:3c:c9:69:42:3c:9a:66:9f:13:fe:e0:72:3f:4e:91:61:
         dd:48:7b:84:ae:f2:b4:df:3d:b3:17:74:46:11:f5:4b:2d:c9:
         9d:1a:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:13:49 2026 by rpki-client